@ai-matrx/records 0.73.0 → 0.73.2

package/dist/templates/index.d.cts

@@ -219,6 +219,13 @@ declare function attachmentProblems(raw: TemplateSpec & {
 declare function validateTemplate(raw: TemplateSpec, options?: ValidateOptions): TemplateVerdict;
 /** Validate and throw with every problem. A waiting template does not throw — it is held, not broken. */
 declare function assertTemplate(spec: TemplateSpec, options?: ValidateOptions): TemplateVerdict;
+/**
+ * The lowest sensitivity the store accepts for a field, by what it holds: "restricted" (kept from the AI:
+ * an identity or health fact about a person, a code, a card or bank number, privileged notes),
+ * "confidential" (it reaches a person or a home: a phone, an email, an address), or null (no floor).
+ * The template check refuses anything below it; the describe box fills an omitted sensitivity up to it.
+ */
+declare function sensitivityFloorOf(table: Pick<TemplateTable, "token" | "labelSingular" | "subject" | "fields">, f: Pick<TemplateField, "key" | "label" | "parityType">): "restricted" | "confidential" | null;
 
 type Uuid = string;
 /** The binding a host writes onto the copied agent's variable (the kit `merge_field` shape). */
@@ -591,4 +598,4 @@ declare function runTemplateDoor(source: RecordsDataSource, door: TemplateFamily
 /** Tables a plan makes (for a suite): the `tables.*` refs its steps save. */
 declare function planTables(plan: TemplateInstallPlan): string[];
 
-export { AgentSnapshotRow, type AggregateOutcome, type CapabilityStatus, CapabilityWord, DESIGNATED_REAL_NUMBERS, type DerivedUseCase, FORMULA_FUNCTIONS, INSTALL_PLAN_VERSION, MAIN_TABLE_ROWS_MAX, MAIN_TABLE_ROWS_MIN, PUBLIC_MAIL_DOMAINS, RECORDS_UI_CALENDAR_MODES, RECORDS_UI_FIELD_SURFACES, RECORDS_UI_VIEW_LAYOUTS, SERVER_DATE_GRAMMAR, type SeedRow, SharedBlockId, TABLES_MAX, TABLES_MIN, TEMPLATE_PLAN_DOORS, TIME_BOUND_STAGE, TITLE_DISTINCT_SHARE, TemplateAgent, type TemplateAgentBinding, type TemplateAgentCopyRequest, type TemplateAssetRow, type TemplateAttachment, TemplateAutomation, TemplateBooking, type TemplateCard, TemplateChecklist, TemplateDashboard, type TemplateDeclaration, TemplateDigest, TemplateDimensions, TemplateDocument, type TemplateDoorAnswer, type TemplateDoorRun, TemplateDrillDown, type TemplateFamilyDoor, TemplateField, TemplateFootprint, TemplateForm, type TemplateHostExtras, type TemplateInstallPlan, type TemplateMadeKind, TemplateMergeBinding, TemplateNotification, type TemplatePlanAgent, type TemplatePlanBinding, type TemplatePlanDoor, type TemplatePlanExtraAgent, type TemplatePlanStep, TemplatePortal, TemplateRowAction, TemplateSpec, type TemplateSpecWithAttachments, TemplateStageRules, type TemplateStatus, TemplateTable, TemplateTryIt, type TemplateVerdict, TemplateView, TemplateWorkflow, type ValidateOptions, agentCopyRequest, allTables, anyOfWhere, assertTemplate, attachmentProblems, automationHeld, blockTable, bookingArgs, bookingColumnsProblem, capabilitiesUsed, capabilityStatus, checklistSpec, choiceDisplayFormat, compileHostExtras, compileInstallPlan, dashboardBlocks, deferredRelationFields, deferredRelations, derivedFieldSpec, digestSpec, documentBody, domainsIn, drillDownDashboard, evalFormula, extrasProblems, foreignTextProblems, formArgs, formulaFieldSpec, formulaOrder, formulaRefs, foundationTokens, isSelfDeclaredField, isTimedField, normalizeForPhones, notificationParts, numberText, numberedStreet, parseFormula, parseNumeric, peopleOf, phonesOutsideFictionalRange, planTables, portalArgs, relationFieldSpec, relationPatches, relativeHasTime, requiredCircleProblem, resolveDateToken, resolveRelativeDates, rowActionList, rowLevels, rowsFor, ruleBreak, runTemplateDoor, selfDeclaredFieldSpec, shellsPayload, stageFieldOf, stageRulesSpec, storeAggregate, storeFilterMatches, storeText, tableShellPayload, templateCard, templateDeclaration, templateText, timedFieldSpec, toUseCase, unwrap, useCaseProblemsOf, validateTemplate, viewMatches, viewSpec, zoneOffset };
+export { AgentSnapshotRow, type AggregateOutcome, type CapabilityStatus, CapabilityWord, DESIGNATED_REAL_NUMBERS, type DerivedUseCase, FORMULA_FUNCTIONS, INSTALL_PLAN_VERSION, MAIN_TABLE_ROWS_MAX, MAIN_TABLE_ROWS_MIN, PUBLIC_MAIL_DOMAINS, RECORDS_UI_CALENDAR_MODES, RECORDS_UI_FIELD_SURFACES, RECORDS_UI_VIEW_LAYOUTS, SERVER_DATE_GRAMMAR, type SeedRow, SharedBlockId, TABLES_MAX, TABLES_MIN, TEMPLATE_PLAN_DOORS, TIME_BOUND_STAGE, TITLE_DISTINCT_SHARE, TemplateAgent, type TemplateAgentBinding, type TemplateAgentCopyRequest, type TemplateAssetRow, type TemplateAttachment, TemplateAutomation, TemplateBooking, type TemplateCard, TemplateChecklist, TemplateDashboard, type TemplateDeclaration, TemplateDigest, TemplateDimensions, TemplateDocument, type TemplateDoorAnswer, type TemplateDoorRun, TemplateDrillDown, type TemplateFamilyDoor, TemplateField, TemplateFootprint, TemplateForm, type TemplateHostExtras, type TemplateInstallPlan, type TemplateMadeKind, TemplateMergeBinding, TemplateNotification, type TemplatePlanAgent, type TemplatePlanBinding, type TemplatePlanDoor, type TemplatePlanExtraAgent, type TemplatePlanStep, TemplatePortal, TemplateRowAction, TemplateSpec, type TemplateSpecWithAttachments, TemplateStageRules, type TemplateStatus, TemplateTable, TemplateTryIt, type TemplateVerdict, TemplateView, TemplateWorkflow, type ValidateOptions, agentCopyRequest, allTables, anyOfWhere, assertTemplate, attachmentProblems, automationHeld, blockTable, bookingArgs, bookingColumnsProblem, capabilitiesUsed, capabilityStatus, checklistSpec, choiceDisplayFormat, compileHostExtras, compileInstallPlan, dashboardBlocks, deferredRelationFields, deferredRelations, derivedFieldSpec, digestSpec, documentBody, domainsIn, drillDownDashboard, evalFormula, extrasProblems, foreignTextProblems, formArgs, formulaFieldSpec, formulaOrder, formulaRefs, foundationTokens, isSelfDeclaredField, isTimedField, normalizeForPhones, notificationParts, numberText, numberedStreet, parseFormula, parseNumeric, peopleOf, phonesOutsideFictionalRange, planTables, portalArgs, relationFieldSpec, relationPatches, relativeHasTime, requiredCircleProblem, resolveDateToken, resolveRelativeDates, rowActionList, rowLevels, rowsFor, ruleBreak, runTemplateDoor, selfDeclaredFieldSpec, sensitivityFloorOf, shellsPayload, stageFieldOf, stageRulesSpec, storeAggregate, storeFilterMatches, storeText, tableShellPayload, templateCard, templateDeclaration, templateText, timedFieldSpec, toUseCase, unwrap, useCaseProblemsOf, validateTemplate, viewMatches, viewSpec, zoneOffset };

package/dist/templates/index.d.ts

@@ -219,6 +219,13 @@ declare function attachmentProblems(raw: TemplateSpec & {
 declare function validateTemplate(raw: TemplateSpec, options?: ValidateOptions): TemplateVerdict;
 /** Validate and throw with every problem. A waiting template does not throw — it is held, not broken. */
 declare function assertTemplate(spec: TemplateSpec, options?: ValidateOptions): TemplateVerdict;
+/**
+ * The lowest sensitivity the store accepts for a field, by what it holds: "restricted" (kept from the AI:
+ * an identity or health fact about a person, a code, a card or bank number, privileged notes),
+ * "confidential" (it reaches a person or a home: a phone, an email, an address), or null (no floor).
+ * The template check refuses anything below it; the describe box fills an omitted sensitivity up to it.
+ */
+declare function sensitivityFloorOf(table: Pick<TemplateTable, "token" | "labelSingular" | "subject" | "fields">, f: Pick<TemplateField, "key" | "label" | "parityType">): "restricted" | "confidential" | null;
 
 type Uuid = string;
 /** The binding a host writes onto the copied agent's variable (the kit `merge_field` shape). */
@@ -591,4 +598,4 @@ declare function runTemplateDoor(source: RecordsDataSource, door: TemplateFamily
 /** Tables a plan makes (for a suite): the `tables.*` refs its steps save. */
 declare function planTables(plan: TemplateInstallPlan): string[];
 
-export { AgentSnapshotRow, type AggregateOutcome, type CapabilityStatus, CapabilityWord, DESIGNATED_REAL_NUMBERS, type DerivedUseCase, FORMULA_FUNCTIONS, INSTALL_PLAN_VERSION, MAIN_TABLE_ROWS_MAX, MAIN_TABLE_ROWS_MIN, PUBLIC_MAIL_DOMAINS, RECORDS_UI_CALENDAR_MODES, RECORDS_UI_FIELD_SURFACES, RECORDS_UI_VIEW_LAYOUTS, SERVER_DATE_GRAMMAR, type SeedRow, SharedBlockId, TABLES_MAX, TABLES_MIN, TEMPLATE_PLAN_DOORS, TIME_BOUND_STAGE, TITLE_DISTINCT_SHARE, TemplateAgent, type TemplateAgentBinding, type TemplateAgentCopyRequest, type TemplateAssetRow, type TemplateAttachment, TemplateAutomation, TemplateBooking, type TemplateCard, TemplateChecklist, TemplateDashboard, type TemplateDeclaration, TemplateDigest, TemplateDimensions, TemplateDocument, type TemplateDoorAnswer, type TemplateDoorRun, TemplateDrillDown, type TemplateFamilyDoor, TemplateField, TemplateFootprint, TemplateForm, type TemplateHostExtras, type TemplateInstallPlan, type TemplateMadeKind, TemplateMergeBinding, TemplateNotification, type TemplatePlanAgent, type TemplatePlanBinding, type TemplatePlanDoor, type TemplatePlanExtraAgent, type TemplatePlanStep, TemplatePortal, TemplateRowAction, TemplateSpec, type TemplateSpecWithAttachments, TemplateStageRules, type TemplateStatus, TemplateTable, TemplateTryIt, type TemplateVerdict, TemplateView, TemplateWorkflow, type ValidateOptions, agentCopyRequest, allTables, anyOfWhere, assertTemplate, attachmentProblems, automationHeld, blockTable, bookingArgs, bookingColumnsProblem, capabilitiesUsed, capabilityStatus, checklistSpec, choiceDisplayFormat, compileHostExtras, compileInstallPlan, dashboardBlocks, deferredRelationFields, deferredRelations, derivedFieldSpec, digestSpec, documentBody, domainsIn, drillDownDashboard, evalFormula, extrasProblems, foreignTextProblems, formArgs, formulaFieldSpec, formulaOrder, formulaRefs, foundationTokens, isSelfDeclaredField, isTimedField, normalizeForPhones, notificationParts, numberText, numberedStreet, parseFormula, parseNumeric, peopleOf, phonesOutsideFictionalRange, planTables, portalArgs, relationFieldSpec, relationPatches, relativeHasTime, requiredCircleProblem, resolveDateToken, resolveRelativeDates, rowActionList, rowLevels, rowsFor, ruleBreak, runTemplateDoor, selfDeclaredFieldSpec, shellsPayload, stageFieldOf, stageRulesSpec, storeAggregate, storeFilterMatches, storeText, tableShellPayload, templateCard, templateDeclaration, templateText, timedFieldSpec, toUseCase, unwrap, useCaseProblemsOf, validateTemplate, viewMatches, viewSpec, zoneOffset };
+export { AgentSnapshotRow, type AggregateOutcome, type CapabilityStatus, CapabilityWord, DESIGNATED_REAL_NUMBERS, type DerivedUseCase, FORMULA_FUNCTIONS, INSTALL_PLAN_VERSION, MAIN_TABLE_ROWS_MAX, MAIN_TABLE_ROWS_MIN, PUBLIC_MAIL_DOMAINS, RECORDS_UI_CALENDAR_MODES, RECORDS_UI_FIELD_SURFACES, RECORDS_UI_VIEW_LAYOUTS, SERVER_DATE_GRAMMAR, type SeedRow, SharedBlockId, TABLES_MAX, TABLES_MIN, TEMPLATE_PLAN_DOORS, TIME_BOUND_STAGE, TITLE_DISTINCT_SHARE, TemplateAgent, type TemplateAgentBinding, type TemplateAgentCopyRequest, type TemplateAssetRow, type TemplateAttachment, TemplateAutomation, TemplateBooking, type TemplateCard, TemplateChecklist, TemplateDashboard, type TemplateDeclaration, TemplateDigest, TemplateDimensions, TemplateDocument, type TemplateDoorAnswer, type TemplateDoorRun, TemplateDrillDown, type TemplateFamilyDoor, TemplateField, TemplateFootprint, TemplateForm, type TemplateHostExtras, type TemplateInstallPlan, type TemplateMadeKind, TemplateMergeBinding, TemplateNotification, type TemplatePlanAgent, type TemplatePlanBinding, type TemplatePlanDoor, type TemplatePlanExtraAgent, type TemplatePlanStep, TemplatePortal, TemplateRowAction, TemplateSpec, type TemplateSpecWithAttachments, TemplateStageRules, type TemplateStatus, TemplateTable, TemplateTryIt, type TemplateVerdict, TemplateView, TemplateWorkflow, type ValidateOptions, agentCopyRequest, allTables, anyOfWhere, assertTemplate, attachmentProblems, automationHeld, blockTable, bookingArgs, bookingColumnsProblem, capabilitiesUsed, capabilityStatus, checklistSpec, choiceDisplayFormat, compileHostExtras, compileInstallPlan, dashboardBlocks, deferredRelationFields, deferredRelations, derivedFieldSpec, digestSpec, documentBody, domainsIn, drillDownDashboard, evalFormula, extrasProblems, foreignTextProblems, formArgs, formulaFieldSpec, formulaOrder, formulaRefs, foundationTokens, isSelfDeclaredField, isTimedField, normalizeForPhones, notificationParts, numberText, numberedStreet, parseFormula, parseNumeric, peopleOf, phonesOutsideFictionalRange, planTables, portalArgs, relationFieldSpec, relationPatches, relativeHasTime, requiredCircleProblem, resolveDateToken, resolveRelativeDates, rowActionList, rowLevels, rowsFor, ruleBreak, runTemplateDoor, selfDeclaredFieldSpec, sensitivityFloorOf, shellsPayload, stageFieldOf, stageRulesSpec, storeAggregate, storeFilterMatches, storeText, tableShellPayload, templateCard, templateDeclaration, templateText, timedFieldSpec, toUseCase, unwrap, useCaseProblemsOf, validateTemplate, viewMatches, viewSpec, zoneOffset };

package/dist/templates/index.js

@@ -4989,23 +4989,15 @@ function validateTemplate(raw, options = {}) {
       }
     }
   }
-  const RESTRICTED_KEY = /(^|_)(member_id|ssn|social_security|dob|date_of_birth|birth_date|allerg(y|ies)|diagnos(is|es)|medical_conditions?|conditions|medications?|current_medications|gate_code|access_code|door_code|alarm_code|password|passcode|pin|clinical_notes?|visit_notes?|progress_notes?|soap_notes?|case_notes?|legal_notes?|privileged_notes?|bank(_\w+)?|routing(_number)?|account_number|iban|swift(_code)?|card(_number|_on_file)?|credit_card|cvv|cvc)($|_)/;
-  const RESTRICTED_LABEL = /\b(bank|routing number|iban|card on file|credit card|card number|cvv|medical conditions?|medications?|diagnos[ie]s|case notes|legal notes|privileged)\b/;
-  const PERSONAL_ONLY = /(^|_)(dob|date_of_birth|birth_date|allerg(y|ies)|diagnos(is|es)|medical_conditions?|conditions|medications?|current_medications|clinical_notes?|visit_notes?|progress_notes?|soap_notes?|member_id|ssn|social_security)($|_)/;
-  const holdsPeople = (t) => t.subject ? t.subject === "person" : t.fields.some((f) => /name/.test(f.key)) && t.fields.some((f) => f.parityType === "phone" || f.parityType === "email");
   for (const t of own) {
     for (const f of t.fields) {
       const at = `tables (${t.token}).fields (${f.key})`;
       const text2 = `${f.key} ${norm(f.label)}`;
       const e = effective(t.token, f);
-      const billingTable = /(invoice|bill|statement|receipt|payment|charge|fee|order|account)/i.test(`${t.token} ${t.labelSingular}`);
-      const criminalCharges = /(^|_)charges?($|_)/.test(f.key) && behaviorOf(f) === "text" && !billingTable;
-      const phoneLike = behaviorOf(f) === "text" && /\b(cell|mobile|phone)\b/.test(norm(f.label));
-      const personal = PERSONAL_ONLY.test(f.key) || /\b(medical conditions?|medications?|diagnos[ie]s)\b/.test(norm(f.label));
-      const floored = (RESTRICTED_KEY.test(f.key) || RESTRICTED_LABEL.test(norm(f.label)) || criminalCharges) && (!personal || holdsPeople(t));
-      if (floored && !(e.sensitivity === "restricted" && e.contextPolicy === "exclude")) {
+      const floor = sensitivityFloorOf(t, f);
+      if (floor === "restricted" && !(e.sensitivity === "restricted" && e.contextPolicy === "exclude")) {
         say(at, `"${f.label}" is the kind of value that is restricted and kept from the AI (restricted + exclude).`);
-      } else if ((f.parityType === "phone" || phoneLike || f.parityType === "email" || /address|street/.test(text2)) && SENSITIVITY_RANK.indexOf(e.sensitivity) < 2) {
+      } else if (floor === "confidential" && SENSITIVITY_RANK.indexOf(e.sensitivity) < 2) {
         say(at, `"${f.label}" reaches a person or a home, so it is at least confidential.`);
       } else if (/note/.test(text2) && e.sensitivity === "public") {
         say(at, `"${f.label}" is somebody's notes; notes are never public.`);
@@ -5859,6 +5851,21 @@ function assertTemplate(spec, options = {}) {
   throw new Error(`The template "${spec.id}" is not ready \u2014 ${verdict.problems.length} problem(s):
 ${verdict.problems.map((p) => `  \xB7 ${p.at}: ${p.says}`).join("\n")}`);
 }
+var RESTRICTED_KEY = /(^|_)(member_id|ssn|social_security|dob|date_of_birth|birth_date|allerg(y|ies)|diagnos(is|es)|medical_conditions?|conditions|medications?|current_medications|gate_code|access_code|door_code|alarm_code|password|passcode|pin|clinical_notes?|visit_notes?|progress_notes?|soap_notes?|case_notes?|legal_notes?|privileged_notes?|bank(_\w+)?|routing(_number)?|account_number|iban|swift(_code)?|card(_number|_on_file)?|credit_card|cvv|cvc)($|_)/;
+var RESTRICTED_LABEL = /\b(bank|routing number|iban|card on file|credit card|card number|cvv|medical conditions?|medications?|diagnos[ie]s|case notes|legal notes|privileged)\b/;
+var PERSONAL_ONLY = /(^|_)(dob|date_of_birth|birth_date|allerg(y|ies)|diagnos(is|es)|medical_conditions?|conditions|medications?|current_medications|clinical_notes?|visit_notes?|progress_notes?|soap_notes?|member_id|ssn|social_security)($|_)/;
+var holdsPeople = (t) => t.subject ? t.subject === "person" : t.fields.some((f) => /name/.test(f.key)) && t.fields.some((f) => f.parityType === "phone" || f.parityType === "email");
+function sensitivityFloorOf(table, f) {
+  const text = `${f.key} ${norm(f.label)}`;
+  const billingTable = /(invoice|bill|statement|receipt|payment|charge|fee|order|account)/i.test(`${table.token} ${table.labelSingular ?? ""}`);
+  const criminalCharges = /(^|_)charges?($|_)/.test(f.key) && behaviorOf(f) === "text" && !billingTable;
+  const phoneLike = behaviorOf(f) === "text" && /\b(cell|mobile|phone)\b/.test(norm(f.label));
+  const personal = PERSONAL_ONLY.test(f.key) || /\b(medical conditions?|medications?|diagnos[ie]s)\b/.test(norm(f.label));
+  const floored = (RESTRICTED_KEY.test(f.key) || RESTRICTED_LABEL.test(norm(f.label)) || criminalCharges) && (!personal || holdsPeople(table));
+  if (floored) return "restricted";
+  if (f.parityType === "phone" || phoneLike || f.parityType === "email" || /address|street/.test(text)) return "confidential";
+  return null;
+}
 
 // src/templates/plan.ts
 var INSTALL_PLAN_VERSION = 1;
@@ -6388,6 +6395,7 @@ export {
   ruleBreak,
   runTemplateDoor,
   selfDeclaredFieldSpec,
+  sensitivityFloorOf,
   shellsPayload,
   stageFieldOf,
   stageRulesSpec,